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Abstract. 

Given a bipartite system, correlations between its subsystems can be 
understood as information that each one carries about the other. In order to 
give a model-independent description of secure information disposal, we propose 
the paradigm of private quantum decoupling, corresponding to locally reducing 
correlations in a given bipartite quantum state without transferring them to 
the environment. In this framework, the concept of private local randomness 
naturally arises as a resource, and total correlations get divided into climinablc 
and ineliminable ones. We prove upper and lower bounds on the amount of 
ineliminable correlations present in an arbitrary bipartite state, and show that, 
in tripartite pure states, ineliminable correlations satisfy a monogamy constraint, 
making apparent their quantum nature. A relation with entanglement theory is 
provided by showing that ineliminable correlations constitute an entanglement 
parameter. In the limit of infinitely many copies of the initial state provided, we 
compute the regularized ineliminable correlations to be measured by the coherent 
information, which is thus equipped with a new operational interpretation. In 
particular, our results imply that two subsystems can be privately decoupled if 
their joint state is separable. 
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1. Introduction 

Let us suppose we are given a medium containing sensitive information which, for 
some reason, we want to dispose of in a secure way, i. e. in such a way that neither 
we nor anyone else can have access to — or be deemed to possess — that information 
anymore. In many everyday situations, particular precautions have to be taken in 
advance in order to counter unwanted data remanence, i. e. the persistence of data 
that were nominally erased or removed. 

When dealing with macroscopic objects, the irreversibility of dissipative processes 
is generally enough to provide a practically secure erasure of data (think of e. g. 
shredding the medium). However, such a conclusion is in-principle completely 
inadequate. Let us suppose in fact that the medium carrying the information 
is represented by the state of a microscopic object obeying the laws of Quantum 
Mechanics. Since quantum evolutions are globally reversible, also information has to 
be globally preserved, and any sort of true information erasure is thus forbidden [T]. 
Even so, information could be, if not erased, hidden or encoded in such a way to 
achieve what a secure disposal of information is meant to achieve. Our aim here is to 
introduce and analyze a model-independent paradigm of secure information disposal, 
suitable to describe both classical and quantum information disposal, and naturally 
encompassing the ideal situation in which the only limitations to data processing are 
those imposed by the laws of Quantum Mechanics. 

In order to do so, let us consider the following protocol: let qra denote the 
initial bipartite state shared between two parties — the active player (or receiver) A 
and the passive and inaccessible reference system (or remote sender) R. According 
to a common understanding, the amount of correlations existing in qra between 
subsystems A and R can be interpreted as the amount of information that A carries 
or possesses about R. Since the content of the message is assumed to be private 
(otherwise there is no reason to require security in its disposal), we suppose that 
the state qra is decoupled from other accessible quantum systems, in particular 
from the local environment — i. e. the 'trash' system — of A. The goal for A is to 
securely dispose of the information she has about R. By identifying information with 
correlations, this means that she has to reduce her correlations with R by applying 
local operations on her share only (as R is not accessible), and without transferring 
any of these correlations into her local environment (as this is assumed to be accessible 
to adversaries). We name this protocol (local) private quantum decoupling (PQD). 

PQD constitutes a novel instance of the general task of producing, under various 
constraints, an uncorrelatcd (or, cquivalently, 'factorized') state out of a correlated 
one. The importance of studying decoupling protocols lies in the fact that, with 
appropriate constraints, it is possible to quantitatively characterize diverse properties 
of quantum correlations with respect to their robustness against decoupling. Such an 
approach has been introduced independently in Refs. [2] and [3], and contributed in 
recognizing the central role that decoupling plays in quantum information processing: 
for example, the primitives of state merging state redistribution [12 , and 

the 'mother' protocol |13j . are all based on decoupling arguments, and decoupling 
procedures form the building blocks of many recently constructed coding theorems 
achieving quantum capacity |14[ 115] . Hence, PQD offers a new point of view on the 
study of quantum correlations, with possible implications in entanglement theory and 
quantum cryptography. 

The structure of the paper is as follows: in Section [2] previous approaches 
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to quantum decoupling are described and the new paradigm of PQD is motivated 
through simple examples. The rigorous definition of PQD is given in Section [3] by 
defining eliminable and ineliminable correlations, and the concept of private local 
randomness as a resource is introduced. In Section|4]we prove general bounds on PQD 
when acting on an arbitrary mixed state, and show that ineliminable correlations are 
in fact monogomous correlations, in the sense that they cannot be freely shared. 
This is a feature common to many distinctively quantum correlations, like e. g. 
entanglement (when suitably measured). Section [5] deals with the asymptotic limit 
where infinitely many identical and independent copies of a given state are available: 
in this case, the optimal rate for PQD is explicitly calculated as being expressed by 
the coherent information. In Section [6] we discuss some examples for which PQD 
assumes a particularly simple form. A connection between PQD and random-unitary 
channels is exhibited, together with an open question concerning the latter. Finally, 
Section [7] describes the relations existing between ineliminable correlations, quantum 
entanglement, and other 'quantum' correlations present in an arbitrary bipartite 
quantum state. Here we show that ineliminable correlations represent an entanglement 
parameter, in the sense given by [27]. Section [8] concludes the paper with a brief 
summary of the results obtained and possible directions to investigate in future. 

1.1. Notation and basic concepts 

All quantum systems considered in the following are finite dimensional, in the sense 
that their attached Hilbert spaces Jf? are finite dimensional. We use Greek letters like 
ip, ty, • • • for pure quantum states, while letters like g, r, • • • are reserved for mixed 
states. The usual ket-bra notation denoting the rank-one projector onto the 

state is generally abbreviated simply as ip. Roman letters label the systems sharing 
a quantum state: for example, g RA is a mixed state defined on the composite system 
RA, carrying the Hilbert space Jf R (g> J&a- Where no confusion arises (or it is not 
differently specified), omission of a letter in the label indicates a partial trace, namely, 
QA ■= TirIqra]- 

In classical information theory, given two random variables X and Y distributed 
according to a joint probability distribution p(x,y), the mutual information /(X : 
Y) := H(X) + H(Y) - ff(XY), where H(X) := -T, x P( x ) lo S2P(x) is the Shannon 
entropy, is known to measure both the degree of correlation existing between X and 
Y [f] as well as "the reduction in the uncertainty of X due to the knowledge of Y" (see 
Ref. [16; p. 20). We hence say that Y carries a total of /(X : Y) bits of information 
about X. 

The classical arguments given above can be straightforwardly generalized to 
the quantum case as follows. According to Refs. [2j [3], given a bipartite quantum 
state Qra-i the quantum mutual information (QMI) [4] defined as I R:A (qb,a) '■= 
S(qr) + S(qa) — S(qra), where S(a) := — Trtrlog 2 a is the von Neumann entropy 
of a state a and Qr<a) '■= I^AfR) [Qra] j provides a sound and operationally meaningful 
measure of the total amount of correlations present in g RA [I] It is known that 
I R:A (qra) = if and only if g RA = g R ® g A , while I R:A (g RA ) = 2S(g R ) if and 
only if g R is purified by A. Moreover, when systems R and A are classical, QMI 
coincides with its classical counterpart. It makes sense then to say that the system A 

$ Since /(X : Y) = iff p(x, y) = p(x)p(y) and 7(X : Y) = ff(X) iff p(x, y) = p(y)S(x, /(«/)), namely, 
X is a function of Y. See Ref. |16| . 

§ This means that also correlations, as information, are measured here in (quantum) bits. 
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carries a total of I R:A (qra) (quantum) bits of information about R. Notice that the 
information content, as we defined it, turns out to be positive and symmetric, that 
is, the amount of information A carries about R equals the amount of information 
R carries about A, since I r ' a (qra) = I A:R (qra)- When the state qra is clear from 
the context, we will simply write I(R : A) to indicate I R (qra), an d, in case the 
state is multipartite like, for example, srbe, we will denote I R ' B (Tr e[srbe]) simply 
by I R:B ^rbe) or even by I(R:B). 

We finally recall here also the notion of coherent information |5 which is well- 
known in the literature to play a fundamental role in entanglement theory and 
quantum Shannon theory and is defined as I a ^ r (qra) '■— S(qr) — S(qra)- Contrarily 
to QMI, coherent information can be negative and it is not symmetric as there is a 
preferred directionality in its definition. 

2. Quantum decoupling: previous definitions and new motivations 

Suppose two players, Alice (A) and a Referee (R), share a bipartite quantum state 
Qra- We say that they are decoupled if and only if qra = Qr ® Qa- If the initial 
state is not decoupled, a decoupling procedure aims at transforming the initial state 
qra into (something close to) a factorized state. It is clear that, without imposing 
any constraint on the decoupling procedure, the whole task is trivial: one can always 
prepare, even locally, an exactly decoupled state after having discharged the input into 
the environment. If we want to probe some property of quantum correlations using 
decoupling, the main point is then to choose appropriate constraints making the best 
decoupling strategy non-trivial. In the following, before presenting our decoupling 
task, we will review two different types of decoupling tasks adopted in the literature. 

A first decoupling task is introduced through information-theoretical arguments. 
Refs. [2j [3], with analogous though inequivalent arguments, prove that quantum 
mutual information I r ' a (qra) provides an operational measure of total (both classical 
and quantum) correlations shared between A and B, in that I R:A {qra) quantifies the 
cost of erasing initial correlations. In particular, the decoupling protocol adopted 
in Ref. [5] is related with the theory of private quantum channels [3] and aims at 
constructing a local map A — ► B of the form 



such that (idfl <g> T>a){qra) is close to some factorized state qr (8 ^>b- The additional 
requirement posed in [2] is to use in (|T|) the smallest possible number N of unitary 
operators (indeed, the average over the whole special unitary group SU(<f) achieves 
perfect decoupling, but it requires an infinite amount of randomness to be added). 
Clearly, the number N can in general depend both on the input state qra and on the 
degree of approximation required of the decoupling. Ref. [5] proves that, in the i.i.d. 
asymptotic limit, exact decoupling can be achieved for values of ./V as small as 2 nI ( R:A ) , 
where n is the (large) number of copies of qra provided. Following Landauer's 
principle, quantum mutual information is then interpreted as the total amount of 
correlations per copy, being the minimum cost (measured in bits of extra-randomness 
borrowed from a randomness reservoir) needed in the i.i.d. limit to achieve exact 
decoupling. A similar, though not equivalent, conclusion can be drawn as a special 
case of the general setting introduced in Ref. [3], where a class of transformations 




(1) 



i=l 
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different from (|T|) is considered (in particular, classical communication between the 
two parties is taken into account in an essential way). Ref. [5] interprets quantum 
mutual information as a particular type of quantum deficit, being the minimum cost, 
measured in bits of entropy production, required by a decoupling process consisting 
of local unitaries and local orthogonal measurements only. 

A second, quite different, definition of decoupling task is adopted in Ref. [7]: here 
the input state qra is drawn from a non-trivial set of possible input states (constructed 
as the orbit of different seed states under the action of a unitary representation of a 
group), while the decoupling map can act globally and is required to achieve exact 
decoupling always (there is no approximation here), ft is then shown that some seed 
states induce orbits for which the optimal decoupling map cannot be different from 
the completely depolarizing channel which transforms every state into the maximally 
mixed one. Correspondingly, such correlations are called unerasable, as opposed to 
erasable correlations, which are those that can be decoupled by a non-trivial map. 
Such a distinction hence arises as an algebraic/geometrical property of the set of 
quantum states analyzed, depending on the seed state and the group acting on it. 

The decoupling task we propose here is independent of both previously mentioned 
approaches. In fact, as anticipated in the Introduction, when performing PQD, 
we monitor not only the decrease of correlations between R and A, but also the 
corresponding increase of correlations between R and the environment (causing the 
decoupling [|J. In fact, it is not difficult to see that the group-averaging channel A —> B 
of the form 

K:a^ f dgU g aUt = ± Va, (2) 

JSV(d) a 

of which Eq. aims at being a faithful approximation, when applied on A, does 
not truly destroy correlations between A and R, but simply transfers them to the 
environment, so that R is no more correlated with A, but is correlated with the 
environment. This can be explicitly seen by writing the Stincspring purification [17 
of the channel TZa as an (essentially uniquely defined) isometry Va '■ A — * BE\E 2 , 
with V\Va = 1a, acting as 

V A \Tp A ) = \HE,)®\i>E 2 ), vv, (3) 

where ty + is a maximally entangled state. One can check that indeed it holds 

K(<7 A ) = Tr ElE2 [V A a A Vi], Va. (4) 
On the other hand, 

Tr B [V A a A V A ] = 1 ^®a E . 21 Va. (5) 

In other words, the induced channel A — > E 2 is noiseless: all correlations initially 
shared with R are now perfectly transferred to the environment subsystem E 2 . (In 
fact, the same phenomenon happens with all channels preparing some fixed state 
regardless of the input.) We conclude that the approach adopted in Ref. [2] constitutes 
the opposite of what we want to achieve with PQD: in defining the latter, in fact, 
we will impose an upper bound on the amount of correlations transferred into the 
environment as a consequence of the decoupling process. 

|| It should be clear that non-trivial decoupling processes are possible only in presence of an 
environment interacting with the system. A closed evolution, in fact, does not induce any change in 
the correlations. 
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At this point, the natural question arises — is the constraint we are going to impose 
well balanced? In other words, does it induce some non-trivial situations where we can 
truly eliminate correlations, without merely 'jettisoning' them into the environment, 
and some non-trivial situations where we cannot? As a first motivating example, let us 
consider the extreme case where the initial shared state is a pure state \^ra)- Again, 
due to Stinespring's theorem [17], whatever deterministic transformation Alice could 
engineer can always be represented by an isometry Va '■ A —* BE, with V^Va — 1a, 
the share B being Alice's output, the share E being the environment. In other words, 
the initial bipartite pure state |^.ra) gets transformed into the tripartite pure state 

\®rbe) ■= (1r ® V a )\$ra)- (6) 
Thanks to the identity [5] 

I X:Y 0>xyz) + I X:Z 0>xyz) = 2S x (tp XYZ ), (7) 
where ipxYZ is a tripartite pure state, we see that 

I R ' B {®rbe) + I R:E {<$>rbe) = 2S R ^ RBE ) (8) 

= I R:A (*ra), (9) 

that shows that, if the initial state is pure, total correlations cannot be eliminated but 
only moved from one system to another: pure state correlations constitute a conserved 
quantity. 

As a second motivating example, for which correlations are instead truly 
climinable, let us consider the classically A — > B correlated state [3] 

QRA = yZpiQ R ®\i){i\A, (10) 



where vectors |i)'s are orthonormal. Then, by applying on A the Stinespring's isometry 



MA^^KKeil®!^), (11) 

i 

where B = E = A (dim M'a = d) and the vectors |e*)'s are orthonormal vectors such 
that | (e 1 1 j) | 2 = l/d for all i, j, the resulting tripartite output state 

Srbe ■= (lfl O M a )qra(1r <8 M\) (12) 

satisfies 

^B(E) , 1oS 

Srb(e) = Qr® d ■ (13) 

In other words, by applying Ma, we obtained perfect decoupling between B and R 
(since the state (,rb is factorized), however without correlating R with E (since also 
the state sre is factorized). In this case, we say that the initial correlations in qra 
have been perfectly eliminated. 

In the rest of the paper we will study what happens when initial correlations 
belong to a general bipartite quantum state. The general situation will turn out to 
lie in between the two preceding examples, in the sense that we will be able to divide 
total correlations into those which are eliminable and those which are ineliminable, 
the latter representing some sort of conserved quantity behaving like the correlations 
present in pure bipartite states. 
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3. Private quantum decoupling: mathematical definition 

3.1. Ineliminable correlations 

According to the fact that in our scenario R acts as the passive reference system 
with respect to which information is measured, the goal of approximate PQD is to 
minimize correlations with R by acting with a channel (i.e. with a completely positive, 
trace-preserving map) only on subsystem A of qra, in such a way that the amount 
of correlations transferred to the environment during the decoupling process is upper 
bounded by a privacy parameter e > 0. We call this task e-PQD. The appropriate tool 
to analyze such a task is provided by the Stinespring dilation of a channel 17J : given an 
input Hilbert space J^a (of finite dimension oIa), a channel T>, and an output Hilbert 
space M'b (of finite dimension ds), there always exists a finite dimensional auxiliary 
Hilbert space JS^e (of dimension d# < gU^b) and an isometry V-u : J$°a >—> ^b ® <^e, 
V^Vd — 1a, such that T>(a) — Tr e[Vd<jV^)], for all states a on J^. Such an isometric 
extension Vx> is unique up to local unitary transformations on J4?e, which represents 
the environment interacting with the system during the open evolution described by 
T>. Before proceeding we shall notice that since everything here is finite-dimensional, 
minima and maxima appearing in the following are all achievable. 

In practise, A applies the isometry Vr> on her share, keeps the B part and discards 
E. Accordingly, e-PQD is mathematically characterized by the following quantity: 

S a (qra;£) min I R:B (srbe), (14) 

v A ev s (g RA ) 

where Srbe '■= (Ijj <S> Va)qra(^r <8> Va)> ano - Ve(qra) 1S the set of isometries 
Va ■ J^a *-* ® such that I R:E \\rbe) < £ and, without loss of generality 



since the roles of output subsystems B and E in the definition ( 14 1 can be exchanged, 
I R:E (<;rbe) < I R:B (<;rbe) In formula, 



V e (QRA) :={Va:^a^^b® ^°e 



I R - E (srbe) < e 

& I R:E {<;rbe) < I RJ3 ^rbe) 

The non-negative quantity "E.a{qra',£), which we call e- ineliminable information (or, 
cquivalently, e-ineliminable correlations), measures the amount of correlations with 
the Referee that Alice cannot eliminate, without discharging into the environment 
more than e bits of them. We will refer to the parameter e as the privacy level 
parameter: the two extreme cases, that is, e = and e — oo, correspond to perfect 
PQD and to advantage preserving PQD, respectively. In the following, for sake of 
clarity, we will denote ^a{qra\ °°) simply as 'E.a(qra)- Notice that zia{qra] e) = if 
and only if E a (qra) = 0. 

3.2. Few properties at a glance 



Already from the definition (14), we can see that Ea(qra\ e) is invariant under local 
unitary operations, that is 

Z A ((Ur W a )qra(U r 8> Wl);e) = E a (qr A ; e). (15) 

Moreover, for all E\ > £2, 

< Z a {q R a;ex) < ~ a (qra; £2) < I R:A {qra), (16) 
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since all the values of I rb (srbe) that are achievable with the constraint 
I R:E (srbe) < £2 ar e also achievable with the looser constraint I r ' e (srbe) < £1, 
but not viceversa, while the upper bound I ra {qra) is trivially achieved when Alice 
does nothing at all, in such a way that I r ' e (<;rbe) = 0. 



3.3. Private local randomness is a resource 

Implicitly, by giving Alice the possibility of performing local isometric embeddings, we 
are providing her with free access to local pure states: indeed, an isometric embedding 
is nothing but a unitary interaction of the system with some pure ancillary state. 

On the contrary, let us think for a while to the opposite situation, like the one 
considered in Ref. (3J, [S] in the context of local purity distillation, where Alice is 
granted unlimited access to local randomness, that is, she can freely create maximally 
mixed states. In particular, let us consider such a local randomness as being private, 
i. e. factorized from all other parties taking part — either actively or passively — into 
the protocol (including the adversary Eve). Within this alternative scenario, suppose 
that Alice and the Referee initially share some bipartite two-qubits state qra- Since 
we allow local private randomness for free, we can actually consider the state 

1; , . 

Qraa- SRA®^~, (17) 

where A = C belongs to Alice, namely, Alice happens to be provided with two extra- 
bits of private randomness. The idea is now simple: Alice can use these two extra-bits 
in order to securely decouple A from R. The decoupling isometry V AA : AA — ► AA 
Alice has to perform is given by 

3 

Ya* := 5>>i ® IWLi' ( 18 ) 

i=0 

where the {a l }i correspond to the Pauli's matrices {1, a x , <r v , a 2 }. Written <, RAA '■= 
{1r <£> V AA )g RAA (tn ® Vj. j), it is easy to check that 



,j - QR®^ & SRA — QR <S> ( 19 ) 



that implies ^aa(&raA' £ ) = 0, f° r a ^ e - Then, two extra-bits of private randomness 
in A suffice to securely decouple any two-qubit state qra shared between R and A, 
no matter how correlated is the state Qra- Notice that this is in agreement with 
Ref. [2]. It is important at this point to stress that, in order to eliminate correlations, 
the randomness in A has to loose its privacy, since in general A has to get correlated 
with A — in fact, q AA — (1/4) a l A pAcr A <8> This means that, even if the 

reduced state of A still looks maximally mixed after the decoupling process, it does 
not represent anymore a fresh source of private randomness: in other words, there is 
no catalysis occurring here. 

We can conclude saying that, if private local randomness is provided for free, 
correlations can always be perfectly eliminated: in this sense, the framework of PQD 
implicitly assumes that local private randomness has to be considered as a resource. 

One final remark: from the preceding example, one should not jump to the 
conclusion that, in order to perfectly eliminate n bits of total correlations, at least n 
bits of extra-randomness are always needed. It is indeed possible to securely decouple 
a maximally pure state of two qubits, hence carrying two bits of total correlations, 



using only one bit of extra randomness. See Subsection 6.4 for details 
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4. General bounds and a monogamy relation 

We now face the general problem of quantifying the amount of incliminable correlations 
present in a given state g R A which is neither pure nor simply classically correlated. 
The following Proposition exhibits a useful lower bound on ineliminablc correlations: 

Proposition 1 For any given state g R A, it holds that 

Za(qra;s) > m&x{2I^ R (g RA ) - e, I^ R (g RA ), 0}, (20) 

and 

Za(qra) > max{I^ R (g RA ),0}. □ (21) 

Proof. We introduce a purification \^sra) of qra- Then, any isometry Va ■ ^A l_ > 
<8> tffijs produces a four-partite pure state \T SRBE ) := (ts R ® Va)\^sra)- Since 
both ^ sra and T srbe are purifications of the same state g R , it is easy to check (by 
direct inspection) that: 

I(R:A)+I(R:S) = I{R:B) + I(R:SE). (22) 

Notice that the notation I(R:S) is not ambiguous since I R:S (Ts R be) = I (^sra)- 



Plugging into (|22) the chain rule I{R : SE) = I(R : S) + I(R:E\S), we obtain I(R : 
B) = I(R:A) — I(R:E\S). A second application of the chain rule leads to the estimate 
I(R:E\S) = I(E:R\S) < I(E:RS) = S(SR) + S(E) ~ S(B) = S(A) + S(E) - S(B), 
hence to 

I(R:B) > I^ R {g RA ) + S(B) - S(E). (23) 
Along exactly the same lines, we also obtain 

I(R:E) > I^ R {qra) + S(E) - S(B). (24) 
The case of e-PQD requires I(R:E) < e and I(R:E) < I(R:B). The first condition, 
plugged into (24), gives S(B) — S(E) > I^ R (g R A) — e, which in turns, plugged 



into (|23|), gives I(R : B) > 2I^ R (g R A) — s. The second condition, together with 



Eqs. 123} and (24|, gives I(R : B) > I^ R {g RA )- This proves Eq. (20). The case 



of advantage preserving PQD, on the other hand, only requires the second condition 



I(R:E) < I(R:B), which proves Eq. Q. ■ 

The following Proposition refines the upper bound (16): 
Proposition 2 For any given state g R A, it holds that 
-I \ iRA (6Ra) n 

^aKQra) < ^ ■ D ( 2h > 

Proof. Let us consider isometries of the form Vp :— X) m (l TO s) ® I to s))(^a l> where 
the (in general neither normalized nor orthogonal) vectors {|0™)}m form a rank-one 
POVM (positive operator valued measure), i. e. J2 m 'Pa = ^A, while the vectors 
{| TO )}m 8X6 orthonormal. Isometries of such a form give I(R : B) = I(R : E) by 
construction. This means that the application of an isometry like Vp automatically 
constitutes a suitable candidate for advantage preserving PQD. This means that 
^a(qra) < minp I{R : B), where the minimum is taken over all rank-one POVM 
P. To conclude the proof, we just notice that, by its very definition, the quantity 
minp I(R : B) turns out to be equal to the so-called unrealizable entanglement 
E^(qra) defined in Ref. [10], where it is also proved to satisfy E^(g R A) < I(R:A)/2. 



Due to Proposition [2] we discover the following: 
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Corollary 1 According to definition {lJty , it is unnecessary to consider values for the 
privacy parameter e > I ra (qra) /2. Q 

Another interesting consequence of Proposition [2] is the following: 

Corollary 2 (Monogamy relation) For any given tripartite pure state \^ rab) , for 
Pra(b) ■= Ttb(A)[^rab], H holds that 

Z a ( Pra )+Eb(prb)<S(R), (26) 
namely, ineliminable correlations are monogamous. □ 

Proof. Due to Proposition |] E a (pra) < I(R ■ A)/2 and E B (p RB ) < I(R ■ B)/2. 
Simply by the definition of quantum mutual information then, we obtain 

^■a(pra) + ^b(prb) 

< I [S(R) + S(A) - S(RA) + S(R) + S(B) - S(RB)} 

= i [S(R) + S(A) - S(B) + S(R) + S(B) - S(A)} 
= S(R), 

where we have made use of the fact that the joint state \^rab) is pure, so that 
S(RA) = S(B) and S(RB) = S(A). U 

A relation like that in ( |26[ ) is usually referred to as a monogamy relation, in 
that it implies that ineliminable correlations cannot be shared freely among the 
parties of a multipartite state. Such a property, highly desirable for candidate 
measures of 'quantum' correlations, is a distinctively quantum feature — indeed, 
classical correlations can be freely distributed. In Section [7] we will discuss in more 
detail about the possibility, encouraged by Corollary [2] of considering ineliminable 
correlations as a measure of the 'quantumness' of the correlations present in an 
arbitrary bipartite quantum state. 



5. Asymptotic scenario and achievable rates region 

As it often happens, the analysis of asymptotic scenarios is considerably easier than 
its finite counterpart. In particular, when infinitely many i.i.d. copies of the same 
resource are provided, a wealth of exact results are known in the literature. In this 



case, we define the e- ineliminable information rate by regularizing definition (14) as 
follows: 

E%(q ra ;s):= lim - min (^ BnE J, (27) 

n^oo n v An eV en (ell An ) 

where ^ BnEn := (if"® V A jQ , $£ An (t% l ®V[j i V.Jq^aJ is the set of isometries 
V A „ : J^A n ^ ^B n O 3^ En such that J*'*^^) < e„ and (without loss 
of generality, as noticed before) I Rn ' En {z,^ B E ) < I Rn '' Bn (^ ' B E ), and e := 
limn-^oo e n /n. According to this definition, e becomes the privacy rate: the case 
where only the constraint I R ™'- E » (c^ B E ) < I Rn ' Bn {^R B e ) 1S considered will be 
denoted as , E^{qra)- Again, (qra',£) — if and only if {qra) = 0. In what 
follows, we will characterize the achievable rates region for PQD, that is, the set of 
allowed pairs (3°£{qra', e), s), for any given initial state qra- 



Private Quantum Decoupling and Secure Disposal of Information 



11 



A first characterization is given by Proposition [T] which, due to the extensivity 
of QMI and coherent information, i. e. I Rn ' An (g'^ n A ) = nI R:A (gRA) and 
I^ R n(g%yj = nI^ R {Q RA ), implies that 

32W;e) > ma, X {2I^ R (g RA ) - e, I A ^ R (g RA ),0}, (28) 



and 



^a{qra) > max{/ c ^ K ( toA ),0}. (29) 



In fact, the bound (29) can be proved to be an equality: 

Proposition 3 For any given state pra, it holds that 

Z%(g RA ) = max{I^ R (g RA ),0}. □ (30) 

Proof. We continue here from where the proof of Proposition [2] ended. There, we 
showed that 'Ba(qra) < minp I(R : B), where the minimum is taken over all rank- 
one POVM P. The quantity minp I(R : B) is itself a well-defined quantity with 
its own well-defined regularized version, which we denote by E^(g RA ) > E a (qr A ). 
Let us now introduce a purification \^sra) of g RA and define gs R ■= Tt A [^sra\- 
As shown in Ref. [18], the monogamy formula holds E^(g RA ) + E < A °(gs R ) — S(R), 
where E^^gsn) is the so-called rate of entanglement of assistance, which has been 
proved in Ref. [TO] to be equal to mm{S(S),S(R)}. Since 5(5) = S(RA), we have 



E. a (qr A ) = max{I A ^ >R (gR A ), 0}, and, due to Eq. (29 1, we obtain the statement of 
the proposition. ■ 

Our analysis hence led us to a situation like the one depicted in Figure [l] where 
the achievable rates region for a given initial state guA is sketched. 

As we noticed before, the condition E A (gRA) — is equivalent to saying that A 
can be privately decoupled from R, in the limit of infinitely many copies provided. On 
the other hand, it is known that, for any separable state gRA, max{/ ( f"^' 4 , I A ~* R } < 
0, |24j . This provides an intriguing connection between PQD and entanglement theory, 
stated in the following corollary of Proposition [3j 

Corollary 3 (Ineliminable versus separable correlations) For any separable 
state gRA, ^ a (qra) — 0- In other words, the presence of asymptotically ineliminable 
information is a signature of quantum entanglement. □ 

6. Some examples 

The following examples are presented in order to show that the notion of ineliminable 
correlations cannot be straightforwardly explained in terms of entanglement only, 
as soon as one leaves the pure state case. It is however very hard to find explicit 



counterexamples, as the minimization in Eq. ( 14 1 is difficult to be explicitly solved in 
general. 

6.1. Pure states 

As we already noticed, Propositions[lj3]imply that, for any pure bipartite state I^ha); 
it holds 

~a(*ra) - ^(^Ra) = S(R), (31) 
namely, ineliminable correlations equal the entropy of entanglement. 
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E 
A 




Figure 1. The figure depicts the asymptotically achievable rates region for 
PQD for a given Qrai that is, the set of allowed pairs (S^f {qra\ s), e) , for any 
given initial state qua- The symmetry about the bisector refle cts the possibility 
of exchanging the roles of subsystems B and E in Eq. The dark-grey 

shaded area around the origin corresponds to rates which are forbidden due to 
Proposition]!] The light-grey shaded area, instead, corresponds to rates achievable 
via the result in Proposition [3] and time-sharing. The white areas in between are 
not characterized yet, as well as the boundary of the achievable rates region, 
which could well be given by some curve similar to the dotted one. When the 
privacy rate is set to some e < oo, the corresponding achievable rates region is 
further constrained to lie below the line e = e. Finally, note that, for pure states, 
I(R : A) = 2I^^ A , namely, the achievable rates region collapses onto the most 
external dashed line, according to the fact that correlations carried by bipartite 
pure states constitute a conserved quantity. On the other hand, for separable 
states, I^~* A < 0, namely, the achievable rates region fills the octant: in this 
case, perfect PQD, i. e. the origin (0,0), is achievable (see Corollary J3J) . 



6.2. Classically correlated states 

When A possesses purely classical information about R, i. e. when the shared state 
qra is classically A — > R correlated, that is [3j [22] 

Qra = ^PiQr ® \i){i\A, (32) 

i 

for orthonormal \i)'s, we already saw at the end of Section [2] that 

Za(qra) = ^a(Qra;s) = 0, (33) 
that is, classical correlations can be perfectly shredded. 

6.3. Random-unitary channels 

Let us consider a quantum system A, whose state is initially described be the density 
matrix a, undergoing a channel T : A — > B. Let I^^a) be the purification of a a, where 
the system R plays the role of a reference that does not change in time. Moreover, let 
Wa ■ A — * BE be the Stinespring's isometry [T7] purifying the channel T, that is 

T A (o- A ) = Tr E [W A a A W A ], Va. (34) 
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Let us denote as \&r,be) '■= (Ifl. ® W^IW.ra) the tripartite pure state finally shared 
among the output B, the environment E, and the reference R. 

If the channel T is a closed evolution, namely, if it is described by one isometry 
only, then the reference R is completely decoupled from the environment E. Let us 
suppose now that the only error occurring in the whole process is due to a classical 
shuffling, resulting in a classical randomization of different possible isometries: then, 
the resulting evolution will not be described by one particular isometry, as in the 
closed evolution case, but rather by a mixture of such isometries. This kind of noisy 
evolutions are called random-unitary channels and act like 

K:a^J2P* V * aV *> ( 35 ) 

i 

where pi is a probability distribution and V$ : A — > B are isometries. The following 
questions arise naturally: which kind of correlations between the reference and the 
environment cause (or, depending on the point of view, are caused by) such a 'classical' 
error? Which properties do these correlations satisfy? Can we ascribe a 'classical 
character' to these correlations? 

It is known |23j that a channel 1Z : A — > B admits (on the support of the input 



state a) a random- unitary Kraus representation as in Eq. (35) if and only if there 
exists a rank-one POVM := {^I?}™, 5Z m H?e — ^e, on the environment E such 
that 

Or Qr, Vm, (36) 

where := Tt B e[$rbe (&rb ® We)]- This implies that 

U random-unitary =>■ e A2 (t A2B ; e) = 0, Ve > 0. (37) 

In other words, random-unitary channels create, between the reference system R and 
the environment E, correlations that are perfectly eliminable with a local action on 
E only. 

It is important now to stress that, in general, the form of the reference- 
environment joint state Tzb['&rbe]j originating from the purification of a random- 
unitary channel 1Z : A — > B, can in principle be different from that of a classically 



E — > R correlated state as in Eq. (32 1. In other words, random-unitary channels 
induce a class of states for which perfect PQD is possible that is in principle larger 
than the class of classically correlated states. 



Open problem. Since the implication in (37 1 is in one direction only, it would be 
interesting to characterize the class of channels inducing only perfectly eliminable 
correlations between the reference and the environment: is such a class strictly 
larger than the class of random-unitary channels? If so, does it admit an easier 
characterization [Jf 

6.4- Mixed entangled states 

We already saw, in Subsection |3.3| that there exist entangled mixed states that can 
be securely decoupled for all e > 0. There, we needed two extra-bits of private 
randomness in order to securely decouple whatever two-qubits state, in agreement 

1 In fact, there is no known constructive algorithm to check whether a given channel is random- 
unitary or not. Only the necessary condition of being unital can be easily checked, but it is also 
sufficient only in the simple case of qubit channels. 
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with the fact that a two-qubits state contains at most two bits of total correlations. 
However, before rushing to the conclusion that we always need at least n extra-bits 
of randomness to perfectly eliminate n bits of total correlations, we should consider 
the following example where just one extra-bit of randomness is required to securely 
decouple a maximally entangled pure state of two qubits (hence carrying two bits of 
total correlations). 

Let us consider indeed the state acting on C 2 <£> C 2 <£> C 2 defined as 

°raA-=*ra®^ (38) 

where l^^) := 2~ 1 / 2 (|00) + |11)). For this state, even if A carries only one bit of 
extra-private randomness, one can show that 3^ zWraa) = 0- ^he P r0 °f is easv j as 
the null value is achieved by the isometry M AA : AA — > BE, with B = E = C 4 , 
defined as 

4 

^aa-EM^aI®M' ( 39 ) 

i=l 

where 

le 1 ) :=2- 1 / 2 (|00) + |ll)), 
|e 2 ) :=2- 1 / 2 (|00)-|ll)), 
|e 3 > :-2- 1 / 2 (|10> + |01)), 
|e 4 ) :=2- 1 / 2 (|10)-|01)). 

In fact, the isometry M AA is coherently performing the measurement needed to 
tclcport the maximally mixed state 1/2 from A to R. Hence, for every outcome i, the 
reduced state on R is equal to 1/2, so that, written srbe = (1_r <B> M AA }o RAA \t.R ® 
M\ A ), we get q RB = 4f ® % and <; RE = ® *f, which yields S^^^je) = 0, 
for all e > 0. 



7. Discussion: ineliminable correlations, entanglement, and the 
'quantumness' of correlations 



Through PQD, we found a non-trivial division of total correlations, I (A : B), into 
ineliminable ones, measured by ^a(qra)i and eliminable ones, representing the rest, 
that is, I(A:B) - 3 a (qra)- 

At this point, it is tempting to speculate a bit about hypothetical relations 
between the division of correlations into ineliminable and eliminable ones, versus 
the division into quantum and classical correlations [31 |20j [21j [22]. We already 
saw how random-unitary noise, that is classical noise in the sense explained in 
Subsection |6.3| only induces perfectly eliminable correlations between the reference 
and the environment. Moreover, ineliminable correlations satisfy the two axioms 
required in Ref. |22j for a measure of quantumness: they are zero for classically 
correlated states (32 1 and they are invariant under local unitary transformations (15). 

Also, being upper bounded by one half of the quantum mutual information and 
being equal to the entropy of entanglement for pure states, ineliminable correlations 
fall under the hypotheses of Theorem 2 in Ref. |25j . which proves that, for an arbitrary 
bipartite state qua with S(A) < S(R), it holds 

< S(A) - I C (A R) < f (2^S(A)-Z a (qra)) , (40) 
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where f(x) is a Fannes-type function [8J, that is a positive, concave, continuous, 
monotically increasing function which depends on the dimension of the underlying 
Hilbert space only logarithmically and satisfies linx^o f(aO = 0. Eq. (40 1 shows that, 
whenever the amount of ineliminable correlations in a bipartite state is sufficiently 
large, then such a state is necessarily entangled, since also coherent information has 
to be correspondingly close to the upper bound S(A). 

In this sense, ineliminable correlations can be considered 'genuinely quantum' 
correlations, since Eq. (40 1 tells us that they constitute an entanglement parameter, 
in the sense explained in |27j . namely, the more ineliminable correlations are 
present, the more the state is entangled (coherent information is the paramount 
example of an entanglement parameter), even though ineliminable correlations do 
not satisfy many natural requirements to be a proper entanglement measure. In 
reinforcing this interpretation, it stands the fact, expressed by Corollary [2j that 
ineliminable correlations indeed satisfy a monogamy constraint, which is another 
strongly distinctive feature of quantum correlations versus classical ones. 

Another interesting feature of ineliminable correlations is that, for every state 
Qra, they always represent (already at the level of a single copy) at most one half of 
the total amount of correlations, that is, ^a(qra) < I{R :A)/2 always. This fact is 
to be compared, once again, with what happens for different measures of 'quantum 
vs classical' correlations: according to different definitions, there exist quantum states 
exhibiting quantum correlations without classical correlations, hence representing a 
strikingly counterintuitive situation [21J126J. On the contrary, assuming for a while the 
definition of quantum correlations as the ineliminable ones, every quantum state would 
turn out to be always more correlated classically than quantum, hence reinforcing the 
common-sense intuition about correlations. 

However, in spite of this encouraging list of properties, the existence of 
entangled — even maximally entangled — states with perfectly eliminable correlations 
only (recall the examples analyzed in Subsections 3.3 and 6.4 1 seems to stand as an 
insurmountable argument against the maybe naive statement 'what is ineliminable 
is quantum'. We however think that the dichotomy proposed here can contribute to 
the program of understanding the structure of total correlations, as coming from the 
operational paradigm of distant laboratories, versus the notion of entanglement, which 
is the formal property of not being separable. 



8. Conclusions 



We introduced the operational task of private quantum decoupling (PQD), which 
naturally arises as a model-independent description of secure disposal of information. 
Partial results suggest that there may be a deep connection between the theory of PQD 
and the theory of quantum entanglement. Further research in this direction would be 
in order. Moreover, it could be useful to generalize the asymptotic results presented 
here to the one-shot scenario, by exploiting some recently introduced tools [25]. Also, 
PQD could turn out to be useful in designing quantum cryptographic protocols, where 
the possibility of securely erasing old data and keys is required [29 . 
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